server {
    listen 80;
    server_name localhost;
    root /usr/share/nginx/html;
    client_max_body_size 12m;

    location /tablet-checkin/api/auth/ {
        proxy_pass http://10.10.10.101:3001/api/auth/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    # SSE (devices/:id/stream) needs buffering off and no timeout — otherwise
    # nginx buffers the event-stream response and the tablet's idle page
    # never actually receives a push in real time.
    location /tablet-checkin/api/devices/ {
        proxy_pass http://backend:3001/api/devices/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_buffering off;
        proxy_read_timeout 3600s;
        add_header Cache-Control "no-store";
    }

    location /tablet-checkin/api/ {
        proxy_pass http://backend:3001/api/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        add_header Cache-Control "no-store";
    }

    location /tablet-checkin/health {
        proxy_pass http://backend:3001/health;
    }

    location ~* /tablet-checkin/.*\.(js|css|png|ico|svg|woff2?)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
        try_files $uri =404;
    }

    location /tablet-checkin/ {
        add_header Cache-Control "no-cache" always;
        try_files $uri /tablet-checkin/index.html;
    }

    location = / {
        return 301 /tablet-checkin/;
    }
}